Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-11-27 Thread Georges Khaznadar
Hello Boud,

I checked every permissions which are set by the package wims at
post-install, from revision 3.62-9, they should match with the
requirements you list there.

I shall try to have this new revision uploaded soon.

Boud Roukema a écrit :
 On Mon, 22 Oct 2007, Georges Khaznadar wrote:

 Boud Roukema a écrit :
 ANALYSIS:
 From the command line:

 as user wims:
   cd /var/lib/wims/public_html/  ./wims
 outputs a correct html page.

 as user www-data, same command:

   cd /var/lib/wims/public_html/  ./wims
 outputs:

 Status: 500 WIMS Internal Error

 The command ./wims, in this context, should be executed with the
 identity of the user wims, since the post-installation package is
 supposed to set the permission bit as stated below:

 salut Georges and the bug-tracker,

 i found some more chmod commands sufficient to make wims work
 sufficiently correctly for me to copy/paste old classes, do some
 appropriate mkdir/chown/chmod/cp operations on them and satisfy students'
 needs. :)

 However, i suspect that the setup of user/group/suid and so on that i
 have is not the one intended.  Regarding the wims web-based management
 functions, i'll reply independently to bug 447896 in order to not mess
 up the bug tracking structure.


 Here are the commands i found sufficient (in addition to my previous 
 comments):


 chmod g+rx public_html/scripts/adm/

 chmod g+rx bin chmod g+rx public_html/bin public_html/msg/
 chmod g+rx public_html/bases/d[io]c public_html/bases/sheet/ 
 public_html/bases/site/ public_html/bases/sys/

 chmod g-x log/classes/.[hiw]*

 chmod g+w tmp/forall/ tmp/sessions/

 # This was needed since otherwise the exercises have key information in 
 italian!
 chmod g+rx public_html/modules/adm/sheet.??/
 chmod g+rx public_html/modules/adm/*


 The group in each case is wims, which includes both wims and www-data.

 i hope this helps. i guess for testing (sorry, i'm unlikely to have much
 time on any short time scale, but at least i'd like my feedback here to be
 available), the best solution would be to create a chroot jail and install
 etch from scratch there, then test the installation from aptitude. i'm not
 a debian developer, so i'm only guessing here what would be best.


 As to whether or not the bug is closed, it's hard to say. For me 
 personally,
 the above and my previous list of chmod/chown commands are a hack, which is 
 not enough to close the bug. Maybe the bug severity could just be 
 downgraded.


 In a moment i'll reply to the other bug report.

 bon courage
 boud


-- 
Georges KHAZNADAR et Jocelyne FOURNIER
22 rue des mouettes, 59240 Dunkerque France.
Téléphone +33 (0)3 28 29 17 70



signature.asc
Description: Digital signature


Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-11-26 Thread Boud Roukema

On Mon, 22 Oct 2007, Georges Khaznadar wrote:


Boud Roukema a écrit :

ANALYSIS:

From the command line:


as user wims:
  cd /var/lib/wims/public_html/  ./wims
outputs a correct html page.

as user www-data, same command:

  cd /var/lib/wims/public_html/  ./wims
outputs:


Status: 500 WIMS Internal Error


The command ./wims, in this context, should be executed with the
identity of the user wims, since the post-installation package is
supposed to set the permission bit as stated below:


salut Georges and the bug-tracker,

i found some more chmod commands sufficient to make wims work
sufficiently correctly for me to copy/paste old classes, do some
appropriate mkdir/chown/chmod/cp operations on them and satisfy students'
needs. :)

However, i suspect that the setup of user/group/suid and so on that i
have is not the one intended.  Regarding the wims web-based management
functions, i'll reply independently to bug 447896 in order to not mess
up the bug tracking structure.


Here are the commands i found sufficient (in addition to my previous comments):


chmod g+rx public_html/scripts/adm/

chmod g+rx bin 
chmod g+rx public_html/bin public_html/msg/

chmod g+rx public_html/bases/d[io]c public_html/bases/sheet/ 
public_html/bases/site/ public_html/bases/sys/

chmod g-x log/classes/.[hiw]*

chmod g+w tmp/forall/ tmp/sessions/

# This was needed since otherwise the exercises have key information in 
italian!
chmod g+rx public_html/modules/adm/sheet.??/
chmod g+rx public_html/modules/adm/*


The group in each case is wims, which includes both wims and www-data.

i hope this helps. i guess for testing (sorry, i'm unlikely to have much
time on any short time scale, but at least i'd like my feedback here to be
available), the best solution would be to create a chroot jail and install
etch from scratch there, then test the installation from aptitude. i'm not
a debian developer, so i'm only guessing here what would be best.


As to whether or not the bug is closed, it's hard to say. For me personally,
the above and my previous list of chmod/chown commands are a hack, which is 
not enough to close the bug. Maybe the bug severity could just be downgraded.



In a moment i'll reply to the other bug report.

bon courage
boud

Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-22 Thread Boud Roukema

On Thu, 18 Oct 2007, Georges Khaznadar wrote:


Hello Boud,

the package wims_3.62-8 will be available shortly, which fixes this bug
and many others.


hi Georges,

i think that this bug is not yet closed...  And i have another one which seems
to be independent so i'll file it independently.

amities
boud



--
PROBLEM:
i updated to wims-3.62-8 from debian.ofset.org

i once again get:

WIMS panick! Unable to bring up wimslogd.
Permission denied



ANALYSIS: 

From the command line:


as user wims:
  cd /var/lib/wims/public_html/  ./wims
outputs a correct html page.

as user www-data, same command:

  cd /var/lib/wims/public_html/  ./wims
outputs:


Status: 500 WIMS Internal Error
Cache-Control: no-cache
Pragma: no-cache
Content-type: text/plain


WIMS panick! Unable to bring up wimslogd.
Permission denied
wims: Unable to bring up wimslogd.
Permission denied



i tried the following in the order below:

/var/lib/wims# chmod g+rx bin

chmod -R g+rw log/

chmod -R g+x log/account/ log/[cf]* log/modules/ log/referer # directories

chmod g+rwx tmp/log/  # key step to solution


After this last line, user www-data *was* able to correctly do
  cd /var/lib/wims/public_html/  ./wims

The web interface then gives:


WIMS panick! cannot_create_session_directory
Permission denied


chmod g+w tmp/sessions/

pwd

/var/lib/wims


chmod g+rwx sessions/   # key step to solution

This second problem is now resolved after this chmod.




SUGGESTED SOLUTION:

i don't have the time to check which chmods are necessary or optional among
the above list - i would suggest just doing

chmod g+rwx tmp/log/  # key step to solution
chmod g+rwx sessions/   # key step to solution

and then if there's a problem trying some of the others.



--



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-22 Thread Georges Khaznadar
Boud Roukema a écrit :
 ANALYSIS: 
 From the command line:

 as user wims:
   cd /var/lib/wims/public_html/  ./wims
 outputs a correct html page.

 as user www-data, same command:

   cd /var/lib/wims/public_html/  ./wims
 outputs:

 Status: 500 WIMS Internal Error

The command ./wims, in this context, should be executed with the
identity of the user wims, since the post-installation package is
supposed to set the permission bit as stated below:

$ ls -l /var/lib/wims/public_html/wims
-rwsr-sr-x 1 wims wims 266440 2007-10-20 06:16 /var/lib/wims/public_html/wims

The question should rather be : were the permissions correct for the file
/var/lib/wims/public_html/wims ?

---8---
gk:~$ grep chmod /var/lib/dpkg/info/wims.postinst 
chmod 700 $d
  chmod 6755 $server
  chown wims:wims $conffile; chmod 600 $conffile
  chmod 6755 $lambdawrapper
  chmod 6755 /var/lib/wims/public_html/bin/ch..root
gk:~$ grep server= /var/lib/dpkg/info/wims.postinst 
  server=/var/lib/wims/public_html/wims
  webserver=${webserver%,}
  webserver=${webserver%,}
---8---

probably the postinst failed at some early stage, but you manually 
installed something later and did not run again the configuration scripts?

Amitiés,Georges.



signature.asc
Description: Digital signature


Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-18 Thread Boud Roukema
Package: wims
Version: 3.60-6
Severity: grave
Justification: renders package unusable



-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-686
Locale: LANG=pl_PL.ISO-8859-2, LC_CTYPE=pl_PL.ISO-8859-2 
(charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)

Versions of packages wims depends on:
ii  adduser 3.102Add and remove users and groups
ii  apache  1.3.34-4.1   versatile, high-performance HTTP s
ii  chemeq  1.9  Parser for chemical formula and eq
ii  debconf [debconf-2. 1.5.11   Debian configuration management sy
ii  fortunes1:1.99.1-3   Data files containing fortune cook
ii  gnuplot 4.0.0-5  A command-line driven interactive 
ii  imagemagick 7:6.2.4.5.dfsg1-0.14 Image manipulation programs
ii  libc6   2.3.6.ds1-13etch2GNU C Library: Shared libraries
ii  libgd2-xpm  2.0.33-5.2   GD Graphics Library version 2
ii  maxima  5.10.0-6 A computer algebra system -- base 
ii  octave  1:2.1.73-13  GNU Octave language for numerical 
ii  octave2.0 [octave]  2.0.17-9 The GNU Octave language for numeri
ii  octave2.1 [octave]  1:2.1.73-13  GNU Octave language for numerical 
ii  octave2.9 [octave]  2.9.9-8etch1 GNU Octave language for numerical 
ii  pari-gp 2.3.1-2  PARI/GP Computer Algebra System bi
ii  tetex-bin   3.0-30   The teTeX programs
ii  tetex-extra 3.0.dfsg.3-5etch1Additional TeX input files of teTe
ii  units-filter2.6-1Parser for expressions concerning 
ii  wims-modules3.60-6   modules used by the WIMS server

Versions of packages wims recommends:
ii  gap   4r4p9-1Groups, Algorithms and Programming
pn  wims-extranone (no description available)
ii  yacas 1.0.57-2   Computer Algebra System

-- debconf information:
* wims/reconfigure-webserver: apache
* wims/restart-webserver: true



PROBLEM: 

Installing: installing wims-3.60-6 from debian etch, on a system with
a pre-existing wims-3.58 installed by hand gave an error message
regarding the pre-existence of the wims user and something about a
wims group being needed (i didn't record the exact message).  i did:
addgroup wims  adduser wims wims

IIRC, i then didaptitude install wims   again.  The installation
finished without errors (after about 10-15 minutes...)

The problem: my browser at the page http://mydomain.com/wims gave the error
message:

  WIMS panick! Unable to bring up wimslogd.
  Permission denied

Eventually (after many, many hours, including reading src/log.c and
learning about sockets) i found that by doing some chown + chmod's
this problem was solved. My guess is that www-data (the apache user)
did not have the authorisation to create files and/or directories
in wims' area.


SUGGESTION:  

The debian package for wims should either 

 * give the sysadmin some interactive hints about the possible need to
   fix things with chmod  chown (it is not enough just to say that
   the group wims must be created), or

 * a comment about this could be added to README.Debian, or 

 * it should redo some chmod/chown-ing in the post-installation phase
   in case the installation got stopped half-way and then continued as
   happened in my case.


DETAILS:


DIAGNOSTICS:

uname -a
Linux mydomain 2.6.18-5-686 #1 SMP Wed Oct 3 00:12:50 UTC 2007 i686 GNU/Linux


dpkg -l |grep wims
ii  wims  3.60-6  WWW 
Interactive Mathematics Server (WIMS)
ii  wims-modules  3.60-6  modules 
used by the WIMS server


As shown above, this is still using apache-1.3.


grep wims /var/log/dpkg.log# local times :P

2007-10-18 03:56:04 install wims-modules none 3.60-6
2007-10-18 03:56:04 status half-installed wims-modules 3.60-6
2007-10-18 03:56:14 status unpacked wims-modules 3.60-6
2007-10-18 03:56:14 status unpacked wims-modules 3.60-6
2007-10-18 03:56:15 install wims none 3.60-6
2007-10-18 03:56:15 status half-installed wims 3.60-6
2007-10-18 03:56:19 status unpacked wims 3.60-6
2007-10-18 03:56:19 status unpacked wims 3.60-6
2007-10-18 03:56:21 status unpacked wims-modules 3.60-6
2007-10-18 03:56:21 status half-configured wims-modules 3.60-6
2007-10-18 03:56:26 status half-configured wims-modules 3.60-6
2007-10-18 03:58:43 status half-configured wims-modules 3.60-6
2007-10-18 04:01:59 status installed wims-modules 3.60-6
2007-10-18 04:01:59 status unpacked wims 3.60-6
2007-10-18 04:01:59 status unpacked wims 3.60-6
2007-10-18 04:01:59 status half-configured wims 3.60-6
2007-10-18 04:17:25 status installed wims 3.60-6


grep www-data\|wims 

Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-18 Thread Georges Khaznadar
Hello Boud,

the package wims_3.62-8 will be available shortly, which fixes this bug
and many others.

If you are in a hurry, you can find wims_3.62-7 at an unofficial
repository: deb http://debian.ofset.org etch main
It appears to have a single bug, which will be fixed in the next
release, but this is worked around by making a 
chown -R wims:wims /var/lib/wims/public_html and making all pending
configurations after the failed installation.

Best regards,   Georges.

Boud Roukema a écrit :
 Package: wims
 Version: 3.60-6
 Severity: grave
 Justification: renders package unusable
 
 
 
 -- System Information:
 Debian Release: 4.0
   APT prefers stable
   APT policy: (500, 'stable')
 Architecture: i386 (i686)
 Shell:  /bin/sh linked to /bin/bash
 Kernel: Linux 2.6.18-5-686
 Locale: LANG=pl_PL.ISO-8859-2, LC_CTYPE=pl_PL.ISO-8859-2 
 (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
 
 Versions of packages wims depends on:
 ii  adduser 3.102Add and remove users and groups
 ii  apache  1.3.34-4.1   versatile, high-performance HTTP 
 s
 ii  chemeq  1.9  Parser for chemical formula and 
 eq
 ii  debconf [debconf-2. 1.5.11   Debian configuration management 
 sy
 ii  fortunes1:1.99.1-3   Data files containing fortune 
 cook
 ii  gnuplot 4.0.0-5  A command-line driven 
 interactive 
 ii  imagemagick 7:6.2.4.5.dfsg1-0.14 Image manipulation programs
 ii  libc6   2.3.6.ds1-13etch2GNU C Library: Shared libraries
 ii  libgd2-xpm  2.0.33-5.2   GD Graphics Library version 2
 ii  maxima  5.10.0-6 A computer algebra system -- 
 base 
 ii  octave  1:2.1.73-13  GNU Octave language for 
 numerical 
 ii  octave2.0 [octave]  2.0.17-9 The GNU Octave language for 
 numeri
 ii  octave2.1 [octave]  1:2.1.73-13  GNU Octave language for 
 numerical 
 ii  octave2.9 [octave]  2.9.9-8etch1 GNU Octave language for 
 numerical 
 ii  pari-gp 2.3.1-2  PARI/GP Computer Algebra System 
 bi
 ii  tetex-bin   3.0-30   The teTeX programs
 ii  tetex-extra 3.0.dfsg.3-5etch1Additional TeX input files of 
 teTe
 ii  units-filter2.6-1Parser for expressions 
 concerning 
 ii  wims-modules3.60-6   modules used by the WIMS server
 
 Versions of packages wims recommends:
 ii  gap   4r4p9-1Groups, Algorithms and 
 Programming
 pn  wims-extranone (no description available)
 ii  yacas 1.0.57-2   Computer Algebra System
 
 -- debconf information:
 * wims/reconfigure-webserver: apache
 * wims/restart-webserver: true
 
 
 
 PROBLEM: 
 
 Installing: installing wims-3.60-6 from debian etch, on a system with
 a pre-existing wims-3.58 installed by hand gave an error message
 regarding the pre-existence of the wims user and something about a
 wims group being needed (i didn't record the exact message).  i did:
 addgroup wims  adduser wims wims
 
 IIRC, i then didaptitude install wims   again.  The installation
 finished without errors (after about 10-15 minutes...)
 
 The problem: my browser at the page http://mydomain.com/wims gave the error
 message:
 
   WIMS panick! Unable to bring up wimslogd.
   Permission denied
 
 Eventually (after many, many hours, including reading src/log.c and
 learning about sockets) i found that by doing some chown + chmod's
 this problem was solved. My guess is that www-data (the apache user)
 did not have the authorisation to create files and/or directories
 in wims' area.
 
 
 SUGGESTION:  
 
 The debian package for wims should either 
 
  * give the sysadmin some interactive hints about the possible need to
fix things with chmod  chown (it is not enough just to say that
the group wims must be created), or
 
  * a comment about this could be added to README.Debian, or 
 
  * it should redo some chmod/chown-ing in the post-installation phase
in case the installation got stopped half-way and then continued as
happened in my case.
 
 
 DETAILS:
 
 
 DIAGNOSTICS:
 
 uname -a
 Linux mydomain 2.6.18-5-686 #1 SMP Wed Oct 3 00:12:50 UTC 2007 i686 GNU/Linux
 
 
 dpkg -l |grep wims
 ii  wims  3.60-6  WWW 
 Interactive Mathematics Server (WIMS)
 ii  wims-modules  3.60-6  modules 
 used by the WIMS server
 
 
 As shown above, this is still using apache-1.3.
 
 
 grep wims /var/log/dpkg.log# local times :P
 
 2007-10-18 03:56:04 install wims-modules none 3.60-6
 2007-10-18 03:56:04 status half-installed wims-modules 3.60-6
 2007-10-18 03:56:14 status unpacked wims-modules 3.60-6
 2007-10-18 03:56:14 status unpacked wims-modules 3.60-6
 2007-10-18 03:56:15 install wims none 3.60-6
 2007-10-18 03:56:15